Malware: JSS Loader

Description

[JSS Loader](https://attack.mitre.org/software/S0648) is Remote Access Trojan (RAT) with .NET and C++ variants that has been used by [FIN7](https://attack.mitre.org/groups/G0046) since at least 2020.(Citation: eSentire FIN7 July 2021)(Citation: CrowdStrike Carbon Spider August 2021)

External References

• mitre-attack
• eSentire FIN7 July 2021
• CrowdStrike Carbon Spider August 2021

Techniques Used by This Malware

• T1053.005 — Scheduled Task
• T1059.001 — PowerShell
• T1059.005 — Visual Basic
• T1059.007 — JavaScript
• T1105 — Ingress Tool Transfer
• T1204.002 — Malicious File
• T1566.001 — Spearphishing Attachment

APT Groups Using This Malware

• FIN7